Search Images Maps Play YouTube News Gmail Drive More »
Sign in
Screen reader users: click this link for accessible mode. Accessible mode has the same essential features but works better with your reader.

Patents

  1. Advanced Patent Search
Publication numberUS5555551 A
Publication typeGrant
Application numberUS 08/389,348
Publication dateSep 10, 1996
Filing dateFeb 16, 1995
Priority dateJun 29, 1993
Fee statusPaid
Also published asUS5420910, US5420910, US6185416, WO1995001707A1
Publication number08389348, 389348, US 5555551 A, US 5555551A, US-A-5555551, US5555551 A, US5555551A
InventorsRonald S. Rudokas, John A. Storch, David L. Daniels
Original AssigneeAirtouch Communications, Inc.
Export CitationBiBTeX, EndNote, RefMan
External Links: USPTO, USPTO Assignment, Espacenet
Method and apparatus for fraud control in cellular telephone systems
US 5555551 A
Abstract
A method and apparatus for fraud control in cellular telephone systems. Call records from a switch are scanned to identify a fraudulent cellular phone based on its behavior. An identifier, e.g., a radio frequency (RF) signature, representative of the fraudulent phone is stored in a control channel editor at a cell site. A database of identifiers may comprise a positive validation database storing the identifiers for all valid phones used in the cellular telephone system, or it may be a negative validation database storing the identifiers for known fraudulent phones. A control channel editor intercepts a call origination request transmitted by a phone, and a control processor compares one or more characteristics of the phone transmitting the call origination request to the database of identifiers. The control processor then prevents the call origination request from completing when the comparison indicates that the phone is fraudulent. The call origination request can be prevented from completing by (1) re-routing the call to a customer service or "fraud hot line" number, (2) interrupting the call origination request, (3) transmitting a "hang-up" message to the phone, (4) transmitting a "hang-up" message to the cell site, or (5) transmitting a "tear-down" message to a switch.
Images(3)
Previous page
Next page
Claims(14)
What is claimed is:
1. A method of preventing fraudulent calls in a cellular telephone system, comprising the steps of:
(a) scanning call records from the cellular telephone system;
(b) analyzing characteristics from the scanned call records to identify a fraudulent cellular telephone;
(c) storing a called number previously received from the fraudulent cellular telephone in an electronic memory;
(d) receiving a call request from a cellular telephone, wherein the call request comprises a called number and a calling number; and
(e) preventing the call request from completing when the called number of the request matches the called number previously received from the fraudulent cellular telephone and stored in the electronic memory.
2. The method as set forth in claim 1 above, wherein the step of preventing further comprises means for identifying the cellular telephone as another fraudulent cellular telephone.
3. The method as set forth in claim 1 above, wherein the step of preventing comprises the step of re-routing the request by replacing the called number.
4. The method as set forth in claim 1 above, wherein the step of preventing comprises the step of interrupting the call request.
5. The method as set forth in claim 1 above, wherein the step of preventing comprises the step of transmitting a "hang-up" command to the cellular telephone system.
6. The method as set forth in claim 1 above, wherein the step of preventing comprises the step of transmitting a "hang-up" command to the cellular telephone.
7. The method as set forth in claim 1 above, wherein the means for preventing comprises the step of transmitting a "tear-down" command to the cellular telephone system.
8. An apparatus for preventing fraudulent calls in a cellular telephone system, comprising:
(a) means for scanning call records from the cellular telephone system;
(b) means for analyzing characteristics from the scanned call records to identify a fraudulent cellular telephone;
(c) means for storing a called number previously received from the fraudulent cellular telephone in an electronic memory;
(d) means for receiving a call request from a cellular telephone, wherein the call request comprises a called number and a calling number; and
(e) means for preventing the call request from completing when the called number of the call request matches the called number previously received from the fraudulent cellular telephone and stored in the electronic memory.
9. The apparatus as set forth in claim 8 above, wherein the means for preventing further comprises means for identifying the cellular telephone as another fraudulent cellular telephone.
10. The apparatus as set forth in claim 8 above, wherein the means for preventing comprises means for re-routing the call request by replacing the called number.
11. The apparatus as set forth in claim 8 above, wherein the means for preventing comprises means for interrupting the call request.
12. The apparatus as set forth in claim 8 above, wherein the means for preventing comprises means for transmitting a "hang-up" command to the cellular telephone system.
13. The apparatus as set forth in claim 8 above, wherein the means for preventing comprises means for transmitting a "hang-up" command to the cellular telephone.
14. The apparatus as set forth in claim 8 above, wherein the means for preventing comprises means for transmitting a "tear-down" command to the cellular telephone system.
Description

This is a continuation of application Ser. No. 08/084,367, filed Jun. 29, 1993, now U.S. Pat. No. 5,920,910 which is incorporated herein by reference.

BACKGROUND OF THE INVENTION

1. Field of the Invention

This invention relates in general to radio frequency (RF) communication systems, and in particular, to a method and apparatus for fraud control in cellular modible radiotelephone (CMR) and personal communications services (PCS) systems.

2. Description of Related Art

Cellular telephones combine the mobility of the radio link and the world-wide land telephone network to provide a communication link to any other telephone in the world. However, as cellular phones have become more prevalent throughout the country, fraud has become a major problem. Cellular fraud robs service providers of hundreds of millions of dollars every year. Like all crimes, there are several varieties of cellular fraud, including "cloning."

Cloning fraud, which occurs when a legitimate subscriber's MIN/ESN combination is used for illegal purposes, is among the most sophisticated and difficult forms of fraud to prevent. Often, the pirate will use simple electronic devices to "capture" the legitimate MIN/ESN combination during its transmission by radio frequency (RF). In these cases, the legitimate subscriber often does not know fraud is being committed with his or her MIN/ESN combination until they receive the bill. This is currently the most popular method of gaining illegal access to a cellular system, because the legitimacy of the stolen MIN/ESN combinations makes cloning difficult to catch.

There are certain steps that can be taken to prevent cloning fraud. In some instances, carriers block calls to certain destinations, or impose "brownouts" on calls using specified MIN codes, particularly on international calls, that have been previously abused. Although drastic, this method currently is often the only way to stop cloning fraud.

The eventual release of digital cellular phones into the mass market will provide another avenue for fraud. Digital phones will also be susceptible to new and improved criminal techniques for stealing MIN/ESN combinations. Thus, carriers are forced to seek other methods of detecting and preventing fraudulent calls.

Several companies, including Electronic Data Systems (EDS) and Subscriber Computing, Inc. (SCI) have developed anti-cloning products that analyze calling patterns using call records. For example, EDS' PCC Cloning Detection System and SCI's Fraud Watch System are designed to be interfaced with cellular switches, so that call information can be collected after the calls have been completed. These systems can be used to identify calling patterns in the collected information that indicate fraudulent usage.

These systems typically allow operators to specify certain criteria to identify fraud. These criteria may include number of calls per hour, call durations, number of minutes used by a specific phone within an hour, number of international or toll calls per hour, and calls to specific countries or NPA/NXXX codes. Operator can also identify fraudulent usage by the specific number dialed for those numbers that have been previously identified as a number called by fraudulent callers. The call records of cellular phones meeting any number of criteria can be viewed online or printed.

Although they cannot prevent cloning fraud, such systems provide carriers with a method of identifying cloning fraud, so that losses can be tabulated. Unfortunately, current methods can only detect or monitor fraud after the caller hangs up, and provide no way to stop fraud. Thus, there is a need in the art for techniques that enhance the use of analyzed call patterns to deny pirates the use of cellular telephone systems.

SUMMARY OF THE INVENTION

To overcome the limitations in the prior art described above, and to overcome other limitations that will become apparent upon reading and understanding the present specification, the present invention discloses a method and apparatus for fraud control in RF communications systems, and cellular telephone systems in particular. Call records are scanned to identify a fraudulent cellular phone based on its behavior. An identifier, for example, an RF signature, representative of the fraudulent cellular phone is stored in fraud control equipment located at a cell site. A database of identifiers may comprise a positive validation database storing the identifiers for all valid cellular phones used in the cellular telephone system, or it may be a negative validation database storing the identifiers for known fraudulent cellular phones. A control channel editor intercepts a call origination request transmitted from a cellular phone to the cell site, and compares one or more characteristics of the cellular phone transmitting the call origination request to the database of identifiers. The control channel editor then prevents the completion of the phone call when the comparison indicates that the cellular phone is fraudulent. The call origination request can be prevented from completing by (1) re-routing the call to a customer service or "fraud hot line" number, (2) interrupting the call origination request, (3) transmitting a "hang-up" message to the phone, (4) transmitting a "hang-up" message to the cell site, or (5) transmitting a "tear-down" message to a switch.

BRIEF DESCRIPTION OF THE DRAWINGS

Referring now to the drawings in which like reference numbers represent corresponding elements throughout:

FIG. 1 is a block diagram illustrating the components of the present invention;

FIG. 2 is a block diagram illustrating the components of the present invention including an emitter detect; and

FIG. 3 is a block diagram further illustrating the components of the centralized fraud control system used in the present invention.

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENT

In the following description of the preferred embodiment, reference is made to the accompanying drawings which form a part hereof, and in which is shown by way of illustration, a specific embodiment in which the invention may be practiced. It is to be understood that other embodiments may be used and changes may be made without departing from the scope of the present invention.

Overview

The present invention provides a method and apparatus for fraudulent control in controlled access wireless communications systems, including cellular mobile radiotelephone (CMR) systems, personal communications services (PCS) systems, and specific multiuser radio (SMR) systems. The present invention identifies fraudulent cellular phones by past behavior and a unique identifier, and then denies these cellular phones any further use of the cellular network. The present invention also has application to system monitoring of cell site and subscriber phone performance, cellular phone location services, and other applications.

FIG. 1 is a block diagram illustrating a component of the present invention. A control channel editor 10 comprises receive side components including an FM receiver 12, data demodulator 14, delay memory logic 16, data modulator 18 and an FM transmitter 20, and transmit side components including an FM receiver 22, data demodulator 24, data controller 26, data modulator 28 and an FM transmitter 30.

The control channel editor 10 is coupled to the RF distribution cabling from the cell site antennae 32 and to the cell site control channel equipment 34. Since the control channel editor 10 deals with a standard RF interface, it can be used with any cell site equipment 34. Moreover, the operation of the control channel editor 10 is transparent to cellular phone users during normal operation, and acts only to interrupt the placement of calls by fraudulent cellular phones.

In order to provide the level of reliability required in a public service system, fail-safe relays 36 and 38 are provided to allow normal operation of the cell site equipment should a malfunction occur within the control channel editor 10. If the control channel editor 10 fails in any way, the relays 36 and 38 will be de-energized, so that control channel editor 10 is bypassed.

A control processor 40 is coupled to the control channel editor 10 via the delay memory logic 12 and the data controller 26. Also coupled to the control processor is a call termination signal generator 42, an RF signature system 44, a switch 46, and a centralized fraud control system 48.

Upon further reading of this specification, those skilled in the art will recognize that not all of the various components shown in FIG. 1 are required to practice the present invention. Moreover, different combinations of the components from those illustrated herein may be used, as described in more detail below. In addition, the connections between components may be modified from those illustrated herein, depending on the method of fraud control used.

Operation

When a user first turns on his cellular telephone, the cellular phone scans and identifies the set-up or control channels being received. The cellular phone then selects and tunes to the strongest control channel signal, presumably from the nearest cell transmitter. Transmitted "busy-idle" bits inform the cellular phone of the status of the reverse signalling portion (phone to cell site) of the control channel to prevent simultaneous seizure by more than one cellular phone. There are other handshake and timing checks to guard against collisions between cellular phones.

The cellular phone automatically registers with the cellular system when it is powered on. At registration, the phone sends its mobile identification number (MIN), electronic serial number (ESN), station class mark, etc., to the cell site. Depending upon system procedures, registration can verify that service for the cellular phone is available, or that the cellular phone is not on a "hot list" relating to unauthorized use or stolen phones. However, unless the MIN/ESN combination is on the "hot list," registration will not identify cloning fraud. After registration, the cellular phone then turns-off its transmitter, although it continues to monitor the selected control channel for incoming calls.

When a call is originated from the cellular phone, the subscriber enters the dialed digits of the called number, which are temporarily stored in the cellular phone, and presses the "send" key. The cellular phone then goes "off-hook," and scans and selects the strongest control channel. When a "busy-idle" bit signifies that the control channel is idle, the phone sends a data stream to the cell site, including its identification (MIN/ESN) and the dialed digits of the called number.

In one embodiment of the present invention, the signalling data stream from the cellular phone is received as RF signals at the antennae 32 of the cell site. The RF signals are coupled from the antennae 32 to the FM receiver 12, and then demodulated by data demodulator 14. At the appropriate time, the transmit side components of the control channel editor 10 toggle the busy/idle bit in the signalling data stream to the cellular phone. This "handshake" lets the cellular phone know that the cell site is receiving the control signal. The data stream is then stored at delay memory logic 16, so that the call origination request represented thereby can be delayed if necessary until the identity of the cellular phone is verified. The data stream is also transmitted to the control microprocessor 40, which uses one or more of a plurality of identification techniques to determine whether the cellular phone is fraudulent. After the control microprocessor 40 completes its identification, and has determined that the cellular phone is not fraudulent, the data stream is re-modulated by data modulator 18 to the same frequency and then transmitted to a control channel transceiver component (not shown) of the cell site equipment 34 by the FM transmitter 20. To complete the call set-up, the control channel transceiver component of the cell site equipment 34 transmits the voice channel assignment to the transmit side components of the control channel editor 10. The transmit side components of the control channel editor 10 transmit the voice channel assignment to the cellular phone and to the control processor 40.

If the cellular phone is identified as fraudulent, then the control processor 40 and control channel editor 10 can use one or more of a plurality of different methods to handle the call origination. For example, one method may completely interrupt or deny the call set-up, so that the data stream received from the cellular phone is not transmitted to the control channel transceiver of the cell site equipment 34. Another method may alter the dialed phone number embedded in the data stream, so that the call is re-routed to a customer service phone number or "fraud hot line" phone number instead of the phone number dialed by the user. Both of these methods would preferably use a fast identification technique in the control microprocessor 40, e.g., identification within 0.5 seconds, so that calls are not adversely affected by slow call origination response. Moreover, this method would require only the receive side components of the control channel editor 10.

Still another method may send release, reorder, maintenance, or interrupt order commands to the cellular phone using the transmit side components of the control channel editor 10. While this method could be used with a fast identification technique, it is also readily used with slower identification techniques, e.g., identification within one second. Moreover, this method would require both the receive side and transmit side components of the control channel editor 10, although the receive side components may only need to "tap" into the reverse signalling data streams and may not have to delay and/or re-build the data streams.

Yet another method may transmit a call termination signal to a voice channel transceiver (not shown) of the cell site equipment 34 using the call termination signal generator 42. The particular voice channel transceiver is identified by the voice channel assignment information provided to the control processor 40 by the transmit side components of the control channel editor 10. The call termination signal generator 42 instructs the cell site equipment 34 that the user has "hung up" his phone, so that the cell site equipment 34 then also hangs up. While this method could be used with a fast identification technique, it also permits the use of slower, more complex identification techniques, e.g., identification taking more than one second. Moreover, the call termination could occur at any point during the call, so there is no time limit for the identification techniques. However, the method generates call records that will need to be resolved during the billing cycle to avoid billing the valid customers for the fraudulent calls.

Still yet another method may transmit a call termination command to the switch 46 from the control microprocessor 40. This command would instruct the switch 46 to terminate the call. While this method could be used with a fast identification technique, it also permits the use of slower, more complex identification techniques, e.g., identification taking more than one second. The call termination could occur at any point during the call, so there is no time limit for the identification techniques. Moreover, this method may only require the receive side components of the control channel editor 10 for "tapping" the signalling data stream from the cellular phone, and thus may not have to delay and/or re-build the data streams. However, the method generates call records that will need to be resolved during the billing cycle to avoid billing the valid customers for the fraudulent calls.

The identification techniques performed by the control microprocessor 40 would compare the cellular phone placing the call against an identification database. These comparisons may be performed against a negative validation database (containing known fraudulent cellular phones) or a positive validation database (containing all known non-fraudulent cellular phones). Typically, a negative validation database would be preferred, because it would be smaller and more readily searched, thereby limiting the amount of time the comparison would require. Moreover, with the negative validation database, secondary pattern data, such as call history, called number, call frequency, call time, station, class, etc., can be used to validate a close match.

The identification techniques performed by the present invention can comprise one or more of a plurality of different methods. For example, known "cloned" MIN/ESN combinations can be denied access to the cellular telephone system, although this is easily circumvented by the pirate re-programming the fraudulent cellular phone. Another technique would use the MIN/ESN combination to look-up one or more known station class marks of the corresponding cellular phone, compare the known station class marks to the station class mark transmitted to the cell site by the cellular phone, and deny access when a mismatch occurs. Still another technique would compare the dialed phone digits to "suspect" phone numbers uncovered during the analysis of prior fraudulent cellular phone calls, and deny calls placed to those suspect phone numbers.

An identification technique based on the comparison of RF signatures for the cellular phones could also be used to identify fraudulent cellular phones. The use of RF signature identification is important because it provides a way of independently identifying the fraudulent phone with using the ESN or MIN. Moreover, the use of RF signature identification can be used nationally to prevent roaming fraud.

RF Signature Identification

FIG. 2 is a block diagram further illustrating the components of the RF signature system 44. The RF signature system 44 typically comprises an FM receiver 50, analog-to digital (A/D) converter 52, and a digital signal processor (DSP) 54. From existing antennae 32, the received RF signal is sent to the FM receiver 50 that operates in the 824 MHz to 894 MHz range and has repeatable performance characteristics, including flat frequency and phase response, low phase noise, high dynamic range, stable amplitude, and accurate automatic gain control. The A/D converter 52, which converts the analog output from the FM receiver 50 into digital data, preferably has a minimum sample rate of 3.2 MHz to accommodate a bandwidth greater than or equal to 1.25 MHz. The DSP 54 performs the necessary calculations using the digital output of the A/D converter 52 to determine the RF signature of the cellular phone. The DSP 54 encodes measured characteristics of the cellular phone into a digital RF signature descriptor data stream.

The control microprocessor 40 compares the digital RF signature descriptor data stream to a database of RF signatures of known fraudulent cellular phones (negative validation) or with a database of RF signatures of all non-fraudulent cellular phones (positive validation). In a positive validation database, the, combination of RF signature with the associated MIN/ESN combination would most likely prove to be "uncloneable." In a negative validation database, secondary pattern data, such as the cell site, MIN/ESN combination, call history, the called number, call frequency, call time, station, class, etc., can be used to validate a close match.

The technique of identifying an RF signature is not new in the art, and has been previously used in military and intelligence applications. An example of an apparatus for characterizing a radio transmitter can be found in U.S. Pat. No. 5,005,210 issued Apr. 2, 1991, to Ferrell, incorporated by reference herein. Other examples include technology developed by the Electromagnetic Systems Laboratory of TRW, Inc.

The characteristics used in creating the RF signature should be consistent over time, temperature, battery voltage, orientation, location, use of car kits, etc., and yet be distinctive between individual cellular phones. Usually, the RF signature can be any unintentional modulation that is unique to the specific cellular phone. Because of fading clue to multipath transmissions, amplitude data will typically be distorted, and thus the characteristics used should preferably comprise phase or frequency type characteristics that are less affected by the cellular environment.

These characteristics can include, but are not limited to, turn-on transmitting amplitude, frequency or phase modulation versus time, the time between turn-on and onset of data, phase and frequency modulation during that delay, the initial amplitude, phase and frequency modulation when data transmission starts, transmission bit times, total times, timing jitter, rise and fall timing, carrier turn-off time, modulation deviation and distortion, modulation phase, bit to bit modulation variations, demodulation spectrum, spurious transmitter data, etc.

Some or all of these various characteristics can be used by the DSP 54 to create an RF signature unique for a given cellular phone. Preferably, the DSP 54 then condenses the selected characteristics into a digital RF signature descriptor data stream having a compact format that is easy to transmit from place to place. For example, the digital RF signature descriptor data stream can be transmitted to a control processor 40 and centralized fraud control system 48 for storage and later inclusion into positive and negative validation databases.

Centralized Fraud Control System

FIG. 3 is a block diagram further illustrating the components of the centralized fraud control system 48. The fraud control system comprises a CPU 56, one or more monitors 58, a data link 60 to a port of the switch 46, a data link 62 to the control microprocessor 40, and (optionally) databases for call records 64, RF signatures 66, positive Validation 68 and negative validation 70.

The fraud control system 48 performs real-time data collection of call records from the cellular telephone switch 46 into a call database 64. Using a behavior profiling algorithm, the fraud control system 48 scans the call records in the database 64 and extracts records corresponding to probable fraudulent activity. The behavior profiling algorithm identifies and flags specific activities represented within the different fields of the call records, including time, duration, cell, dialed digits, etc. Relative probabilities are assigned to the specific activities identified and flagged within the call records.

Some example criteria and their relative probabilities are described below:

1. Excessive call duration threshold made by a cellular phone within a given time period. For example, more than one long duration call per hour could result in the assignment of 15 points towards an alarm threshold.

2. Excessive number of call attempts made by a cellular phone within a given time period. For example, more than one call attempt per hour could result in the assignment of 15 points towards an alarm threshold.

3. All domestic toll call attempts made by a cellular phone within a given time period. For example, each domestic toll call attempt per hour could result in the assignment of 13 points towards an alarm threshold.

4. All international toll call attempts made by a cellular phone within a given time period. For example, each international toll call attempt per hour could result in the assignment of 20 points towards an alarm threshold.

5. All three-way conference calls made by a cellular phone within a given time period. For example, each three-way conference call attempt per hour could result in the assignment of 17 points towards an alarm threshold.

6. Excessive number of call attempts to specific NPA/NXXX codes made by a cellular phone within a given time period. For example, more than one call attempt per hour could result in the assignment of 15 points towards an alarm threshold.

7. Any calls with identical MIN/ESN that overlap for more than 59 seconds. 100 points.

8. Any calls to a known phone number previously called by fraudulent cellular phones under the assumption that "who you call is who you are." 100 points.

9. Any calls from a cellular phone to the number of a known fraudulent cellular phone under the assumption (verified by a 70% correlation) that the cellular phone placing the call is fraudulent as well. 100 points.

These criteria and associated probabilities are the result of trial and error investigation by the Assignee, and have been validated through experience. Nonetheless, those skilled in the art will recognize that other criteria and probabilities could be substituted for those described above, without departing from the scope of the present invention.

The fraud control system 48 indexes all call records in the call database linked to a specific MIN/ESN combination and the relative probabilities are accumulated towards an alarm threshold. The alarm threshold reflects an accumulated probability within some defined period, e.g., accumulating 100 probability points within one hour. The alarm threshold may be reached immediately, as when one call overlaps another with an identical MIN for more than 59 seconds.

If the alarm threshold is reached, the MIN/ESN combination is identified as a fraudulent cellular phone. In some cases, these identifications of fraudulent cellular phones are performed automatically by the fraud control system 48. In other cases, these identifications of fraudulent cellular phones are performed automatically by the fraud control system 48, and then verified through the intervention of an operator.

Once a fraudulent cellular phone is identified by the fraud control system 48, the positive and/or negative validation databases 68 and 70 are updated to reflect the identification. The updates may include all manner of phone-specific information, such as the RF signature from the RF signature database 66, and the MIN/ESN combination, the associated station class marks of the phone, "suspect" dialed numbers, etc., from the call database 64 and/or a subscriber information database (not shown). In addition, the local database used by the control microprocessor 40 is updated to prevent further access by the fraudulent cellular phone.

Conclusion

This concludes the description of the preferred embodiment of the invention. The following paragraphs describe some alternative methods of accomplishing the same invention.

In addition to cellular telephone systems, those skilled in the art will recognize that the present invention can be applied to other mobile radios, personal communications systems, paging systems, aircraft communications, satellite communications, as well any other controlled-access radio frequency communications systems.

Rather than using the specific components and combinations of components described herein, those skilled in the art will recognize that other components and combinations of components could be substituted therefor without departing from the scope of the present invention. Moreover, the connections between various components may be modified from those illustrated herein.

Rather than using the specific methods and process steps described herein, those skilled in the art will recognize that other methods and steps could be substituted therefor without departing from the scope of the present invention.

In summary, a method and apparatus for fraud control in cellular telephone systems has been described. Call records from a switch are scanned to identify a fraudulent cellular phone based on its behavior. An identifier, e.g., a radio frequency (RF) signature, representative of the fraudulent cellular phone is stored in a control channel editor at a cell site. A database of identifiers may comprise a positive validation database storing the identifiers for all valid subscribers of the cellular telephone system, or it may comprise a negative validation database storing the identifiers for known fraudulent cellular phones. A control channel editor intercepts a call origination request transmitted from a cellular phone to the cell site, and a control processor compares one or more characteristics of the cellular phone transmitting the call origination request to the database of identifiers. The control processor then prevents the call origination request from completing when the comparison indicates that the cellular phone is fraudulent. The call origination request can be prevented from completing by (1) re-routing the call to a customer service or "fraud hot line" number, (2) interrupting the call origination request, (3) transmitting a "hang-up" message to the phone, (4) transmitting a "hang-up" message to the cell site, or (5) transmitting a "tear-down" message to a switch.

The foregoing description of the preferred embodiment of the invention has been presented for the purposes of illustration and description. It is not intended to be exhaustive or to limit the invention to the precise form disclosed. Many modifications and variations are possible in light of the above teaching. It is intended that the scope of the invention be limited not by this detailed description, but rather by the claims appended hereto.

Patent Citations
Cited PatentFiling datePublication dateApplicantTitle
US4114136 *Feb 25, 1975Sep 12, 1978The United States Of America As Represented By The Secretary Of The NavyDetermination of variations of wave characteristics
US4146892 *Jan 6, 1977Mar 27, 1979Westinghouse Electric Corp.Adaptive radar threat detection and tracker verification system
US4162377 *Jul 13, 1978Jul 24, 1979Bell Telephone Laboratories, IncorporatedData base auto bill calling using CCIS direct signaling
US4191860 *Jul 13, 1978Mar 4, 1980Bell Telephone Laboratories, IncorporatedData base communication call processing method
US4249257 *Sep 1, 1977Feb 3, 1981The United States Of America As Represented By The Secretary Of The NavyRadio frequency signals analyzer
US4277649 *Jan 18, 1980Jul 7, 1981Bell Telephone Laboratories, IncorporatedMethod and apparatus for screening telephone calls
US4284851 *Jun 29, 1979Aug 18, 1981Bell Telephone Laboratories, IncorporatedArrangement for frustrating fraudulent telephone calls
US4393278 *Aug 26, 1980Jul 12, 1983Miyoshi Allan MTelephone security system
US4411017 *Mar 14, 1980Oct 18, 1983Harris CorporationSecure mobile telephone system
US4439636 *Mar 9, 1982Mar 27, 1984Martha NewkirkCredit card actuated telecommunication access network
US4475009 *Nov 18, 1982Oct 2, 1984Elliot RaisMethod and device for remotely controlling telephone call forwarding
US4549308 *Jul 12, 1982Oct 22, 1985At&T Bell LaboratoriesSecure mobile radio telephony
US4593155 *Oct 11, 1985Jun 3, 1986Motorola, Inc.Portable telephone ID code transfer system
US4597107 *Apr 1, 1983Jun 24, 1986Psr Products, Inc.Modulation detector and classifier
US4626845 *Jan 21, 1986Dec 2, 1986Epic Systems, Inc.Subscriber validation system
US4646345 *Jun 9, 1986Feb 24, 1987Motorola, Inc.Automatic unit ID for quasi-transmission trunked systems
US4680785 *Oct 3, 1984Jul 14, 1987Nippo Communication Industrial Co., Ltd.Personal-signaling communication system
US4698839 *Jun 3, 1986Oct 6, 1987Devaney David BMobile telephone switching office
US4700374 *Jun 21, 1985Oct 13, 1987Alcatel N.V.Mobile telephone location system
US4726056 *Jun 25, 1986Feb 16, 1988American Telephone And Telegraph Company At&T Bell LaboratoriesShared flexible rating of telecommunications calls
US4756020 *Nov 2, 1987Jul 5, 1988American Telephone And Telegraph Company, At&T Bell LaboratoriesMethod and apparatus for disallowing the extension of a call through a network
US4788718 *Oct 5, 1987Nov 29, 1988American Telephone And Telegraph Company, At & T LaboratoriesCall data collection and modification of received call distribution
US4791640 *Oct 21, 1985Dec 13, 1988American Telephone And Telegraph Company, At&T Bell LaboratoriesCall charging arrangement
US4797931 *Feb 26, 1987Jan 10, 1989Kokusai Denshin Denwa Co., Ltd.Audio frequency signal identification apparatus
US4797948 *Jul 22, 1987Jan 10, 1989Motorola, Inc.Vehicle identification technique for vehicle monitoring system employing RF communication
US4843562 *Jun 24, 1987Jun 27, 1989Broadcast Data Systems Limited PartnershipBroadcast information classification system and method
US4860352 *May 20, 1985Aug 22, 1989Satellite Financial Systems CorporationSatellite communication system and method with message authentication suitable for use in financial institutions
US4893330 *Jun 1, 1989Jan 9, 1990American Telephone And Telegraph Company, At&T Bell LaboratoriesMethod and apparatus for restricting credit card communication calls
US4918425 *Jul 25, 1988Apr 17, 1990Daniel E. ElyMonitoring and locating system for an object attached to a transponder monitored by a base station having an associated ID code
US4955049 *Sep 8, 1989Sep 4, 1990Telefonaktiebolaget L M EricssonMethod of supervising mobile telephone subscriptions in a mobile telephone system
US4972479 *Jul 10, 1987Nov 20, 1990Tobias Jr Ray WMethod and apparatus for providing privacy/security in a communication system
US5003629 *Dec 30, 1988Mar 26, 1991Motorola, Inc.Arrangement for identifying subscribers
US5005210 *Dec 30, 1987Apr 2, 1991The Boeing CompanyMethod and apparatus for characterizing a radio transmitter
US5031204 *Feb 13, 1990Jul 9, 1991Gte Mobile Communications Service CorporationInteractive diagnostic system for cellular telephones
US5063588 *Aug 4, 1989Nov 5, 1991Motorola, Inc.Communication system providing automatic identification of calling parties
US5067147 *Apr 26, 1991Nov 19, 1991Pactel CorporationMicrocell system for cellular telephone system
US5091942 *Jul 23, 1990Feb 25, 1992Ericsson Ge Mobile Communications Holding, Inc.Authentication system for digital cellular communications
US5095500 *Oct 19, 1990Mar 10, 1992Motorola, Inc.Cellular radiotelephone diagnostic system
US5128959 *Feb 22, 1991Jul 7, 1992Motorola, Inc.Variable bandwidth CDMA radio system
US5153919 *Sep 13, 1991Oct 6, 1992At&T Bell LaboratoriesService provision authentication protocol
US5159596 *Jun 26, 1990Oct 27, 1992Iwatsu Electric Co., Ltd.Mobile communication system
US5191610 *Feb 28, 1992Mar 2, 1993United Technologies Automotive, Inc.Remote operating system having secure communication of encoded messages and automatic re-synchronization
US5241598 *May 22, 1991Aug 31, 1993Ericsson Ge Mobile Communications, Inc.Rolling key resynchronization in cellular verification and validation system
US5249230 *Nov 21, 1991Sep 28, 1993Motorola, Inc.Authentication system
US5299263 *Mar 4, 1993Mar 29, 1994Bell Communications Research, Inc.Two-way public key authentication and key agreement for low-cost terminals
US5301223 *Aug 25, 1992Apr 5, 1994Cellular Technical Services Company, Inc.Cellular telephone system with remote programming, voice responsive registration and real time billing
US5309501 *Jul 30, 1993May 3, 1994At&T Bell LaboratoriesArrangement for detecting fraudulently identified mobile stations in a cellular mobile telecommunications network
US5329578 *May 26, 1992Jul 12, 1994Northern Telecom LimitedPersonal communication service with mobility manager
US5329591 *Apr 23, 1993Jul 12, 1994Magrill Barry JTransmitter identification and validation system and method
US5335265 *Jun 30, 1993Aug 2, 1994Electronic Data Systems CorporationApparatus for detecting and preventing subscriber number cloning in a cellular mobile telephone system
US5335278 *Dec 31, 1991Aug 2, 1994Wireless Security, Inc.Fraud prevention system and process for cellular mobile telephone networks
US5345595 *Nov 12, 1992Sep 6, 1994Coral Systems, Inc.Apparatus and method for detecting fraudulent telecommunication activity
US5375244 *May 29, 1992Dec 20, 1994At&T Corp.System and method for granting access to a resource
US5420908 *Mar 11, 1993May 30, 1995At&T Corp.Method and apparatus for preventing wireless fraud
US5463681 *Dec 29, 1993Oct 31, 1995At&T Corp.Security system for terminating fraudulent telephone calls
CA1236532A1 *May 30, 1985May 10, 1988Stefan ScheinertMethod of detecting the unauthorized use of an identification assigned to a mobile radio station in a radio transmission system
CA2114040A1 *Jan 24, 1994Sep 12, 1994American Telephone & TelegraphMethod and Apparatus for Preventing Wireless Fraud
DE3402467A1 *Jan 25, 1984Aug 1, 1985Siemens AgDialling method protected against fraudulent use, for the subscribers of a radio network, in particular a mobile radio network
EP0163358A2 *May 29, 1985Dec 4, 1985Philips Patentverwaltung GmbHMethod for recognizing the misuse of the call number pertaining to a mobile station in a radio-communication system
EP0629093A1 *Dec 23, 1993Dec 14, 1994Corsair Communications, IncCellular telephone anti-fraud system
WO1991018467A1 *Oct 6, 1990Nov 23, 1991Cellular Tech ServicesCellular phone rental system
WO1991018468A1 *May 21, 1991Nov 28, 1991Cellular Tech ServicesReal time cellular phone rental system and method
WO1993009640A1 *Nov 6, 1992May 13, 1993Electronic Data Syst CorpApparatus for detecting and preventing subscriber number cloning in a cellular mobile telephone system
WO1993012606A1 *Dec 2, 1992Jun 24, 1993Cellular Tech ServicesReal-time information system for cellular telephones
Non-Patent Citations
Reference
1 *Abstract (in English), Derwent Info Ltd., patent search for English language equivalent patent family members corresponding to German Patent No. 3402467.
2Mobile Phone News, article, "Defense Technologies Cellular Fraud Management", vol. 12, No. 11, Mar. 14, 1994.
3Mobile Phone News, article, "TRW's Phoneprint Added to Cellular's Anti--Fraud Arsenal", vol. 11, No. 41, Oct. 25, 1993.
4 *Mobile Phone News, article, Defense Technologies Cellular Fraud Management , vol. 12, No. 11, Mar. 14, 1994.
5 *Mobile Phone News, article, TRW s Phoneprint Added to Cellular s Anti Fraud Arsenal , vol. 11, No. 41, Oct. 25, 1993.
6Security Technology News, article, "Cellular Toll Fraud on the Decline", vol. 2, No. 4, Feb. 22, 1994.
7 *Security Technology News, article, Cellular Toll Fraud on the Decline , vol. 2, No. 4, Feb. 22, 1994.
8Telephone Engineer & Management, article, "Cellular Carriers Lose Estimated $300--300 Mil to Fraud", p. 62, Dec. 1, 1993.
9 *Telephone Engineer & Management, article, Cellular Carriers Lose Estimated $300 300 Mil to Fraud , p. 62, Dec. 1, 1993.
Referenced by
Citing PatentFiling datePublication dateApplicantTitle
US5715518 *Mar 6, 1996Feb 3, 1998Cellular Technical Services Company, Inc.Adaptive waveform matching for use in transmitter identification
US5729537 *Jun 14, 1996Mar 17, 1998Telefonaktiebolaget L M Ericsson (Publ)Method and apparatus for providing anonymous data transfer in a communication system
US5734978 *Dec 15, 1995Mar 31, 1998Nec CorporationMobile telephone with function to prevent illegal use and method and system for preventing illegal use of mobile telephone using the function
US5758277 *Sep 19, 1996May 26, 1998Corsair Communications, Inc.Transient analysis system for characterizing RF transmitters by analyzing transmitted RF signals
US5790645 *Aug 1, 1996Aug 4, 1998Nynex Science & Technology, Inc.Automatic design of fraud detection systems
US5809412 *Sep 18, 1996Sep 15, 1998Motorola, Inc.System for detecting a fraudulent remote unit which upon detection places a call to the cellular infrastructure using identification in formation of the fraudulent remote unit
US5819171 *Aug 31, 1995Oct 6, 1998Cellular Technical Services Co., Inc.Automated forced call disruption for use with wireless telephone systems
US5893031 *Jun 27, 1996Apr 6, 1999Cellular Technical Services Company, Inc.System and method for collection of transmission characteristics
US5894593 *Nov 4, 1996Apr 13, 1999Motorola, Inc.Method and apparatus for enhancing the detection of the presence of an FM signal using a coded pattern
US5924025 *Oct 25, 1996Jul 13, 1999Cellular Technical Services Company, Inc.System and method for detection of redial fraud in a cellular telephone system
US5940751 *Jun 27, 1996Aug 17, 1999Cellular Technical Services Company, Inc.System and method for detection of fraud in a wireless telephone system
US5953653 *Jan 28, 1997Sep 14, 1999Mediaone Group, Inc.Method and system for preventing mobile roaming fraud
US5956634 *Feb 28, 1997Sep 21, 1999Cellular Technical Services Company, Inc.System and method for detection of fraud in a wireless telephone system
US5956635 *Jul 16, 1996Sep 21, 1999Cellular Technical Services Company, Inc.Detection and prevention of channel grabbing in a wireless communications system
US5970405 *Feb 28, 1997Oct 19, 1999Cellular Technical Services Co., Inc.Apparatus and method for preventing fraudulent calls in a wireless telephone system using destination and fingerprint analysis
US5974328 *Sep 17, 1997Oct 26, 1999Airtouch Communications, Inc.Rapid system access and registration in mobile phone systems
US5999806 *Feb 28, 1997Dec 7, 1999Cellular Technical Services Company, Inc.Waveform collection for use in wireless telephone identification
US5999807 *Feb 28, 1997Dec 7, 1999Cellular Technical Services Company, Inc.System and method for the verification of authentic telephone numbers in a wireless telephone system
US6014557 *Mar 14, 1996Jan 11, 2000Bellsouth Intellectual Property CorporationApparatus and methods for providing wireless system fraud and visibility data
US6016425 *Sep 3, 1996Jan 18, 2000Nortel Networks CorporationHybrid multizone call delivery system
US6035188 *Jun 27, 1996Mar 7, 2000Cellular Technical Services Company, Inc.Active waveform collection for use in transmitter identification
US6038440 *Jun 23, 1997Mar 14, 2000Ericsson Inc.Processing of emergency calls in wireless communications system with fraud protection
US6047174 *Mar 2, 1998Apr 4, 2000Corsair Communications, Inc.Cellular telephone anti-fraud system
US6104922 *Mar 2, 1998Aug 15, 2000Motorola, Inc.User authentication in a communication system utilizing biometric information
US6108642 *Feb 2, 1998Aug 22, 2000Network Sciences Company, Inc.Device for selectively blocking remote purchase requests
US6148190 *Nov 6, 1998Nov 14, 2000Telefonaktiebolaget L M Ericsson (Publ)System and method of handling emergency calls in a radio telecommunications network in the presence of cloned mobile stations
US6157825 *Aug 30, 1995Dec 5, 2000Corsair Communications, Inc.Cellular telephone anti-fraud system
US6181925 *Apr 9, 1997Jan 30, 2001Cellco PartnershipMethod and apparatus for fraud control in a cellular telephone switch
US6185416 *May 30, 1996Feb 6, 2001Cellco PartnershipMethod and apparatus for fraud control in cellular telephone systems
US6212410 *Feb 23, 1998Apr 3, 2001Nec CorporationPortable telephone apparatus with security function
US6219538Feb 24, 1999Apr 17, 2001Cellco PartnershipMethod and apparatus for fraud control in cellular telephone systems
US6266525 *Dec 17, 1998Jul 24, 2001Lucent Technologies Inc.Method for detecting fraudulent use of a communications system
US6327352Feb 24, 1997Dec 4, 2001Ameritech CorporationSystem and method for real-time fraud detection within a telecommunications system
US6377792 *Oct 22, 1999Apr 23, 2002Motorola, Inc.Method and apparatus for network-to-user verification of communication devices based on time
US6466778 *Jul 15, 1998Oct 15, 2002British Telecommunications Public Limited CompanyMonitoring a communication network
US6501950Aug 17, 1998Dec 31, 2002Bellsouth Intellectual Property CorporationSystems and methods for monitoring data signals on a communications network
US6542729 *Apr 27, 1999Apr 1, 2003Qualcomm Inc.System and method for minimizing fraudulent usage of a mobile telephone
US6567511Sep 6, 2001May 20, 2003Ameritech CorporationSystem and method for real-time fraud detection within a telecommunications system
US6714919Feb 25, 2000Mar 30, 2004Network Sciences Company, Inc.Device for selectively blocking remote purchase requests
US6725037 *Sep 11, 2000Apr 20, 2004Bellsouth Intellectual Property CorporationMethod and process for validating roaming, international cellular users
US6895086Nov 12, 2002May 17, 2005Inmate Telephone, Inc.3-Way call detection system and method
US6931380Nov 26, 2001Aug 16, 2005Aurora Wireless Technologies, Ltd.System and method for detecting high credit risk customers
US7027809May 7, 2002Apr 11, 2006Bellsouth Intellectual Property CorporationSystems and methods for providing visibility to SS7 integrated on-line networks
US7031705 *Jan 21, 2004Apr 18, 2006Bellsouth Intellectual Property CorporationMethod and process for validating roaming cellular users
US7058166Mar 26, 2003Jun 6, 2006Sbc Properties, L.P.System and method for real-time fraud detection within a telecommunications system
US7123704Jan 14, 2005Oct 17, 2006Inmate Telephone, Inc.3-Way call detection system
US7158947 *Feb 18, 2004Jan 2, 2007Innovation Management SciencesMethod for selectively blocking remote purchase requests
US7248681May 31, 2006Jul 24, 2007Sbc Properties, L.P.System and method for real-time fraud detection within a telecommunication network
US7248685Aug 4, 2004Jul 24, 2007Inmate Telephone, Inc.Three-way call detection using steganography
US7302250 *Jan 13, 2003Nov 27, 2007Lucent Technologies Inc.Method of recognizing fraudulent wireless emergency service calls
US7327837 *Sep 30, 2002Feb 5, 2008At&T Corp.Call routing method
US7406161Jun 11, 2007Jul 29, 2008Sbc Properties, L.P.System and method for real-time fraud detection within a telecommunication network
US7570751Jun 23, 2008Aug 4, 2009At&T Intellectual Property I, L.P.System and method for real-time fraud detection within a telecommunication network
US7657460Nov 27, 2006Feb 2, 2010Findley Thomas ADevice for selectively blocking remote purchase requests
US7664243Oct 12, 2006Feb 16, 2010Inmate Telephone, Inc.3-way call detection system and method
US7826604Jul 24, 2007Nov 2, 2010Dsi-Iti, LlcThree-way call detection using steganography
US7877611Mar 7, 2001Jan 25, 2011Aurora Wireless Technologies, Ltd.Method and apparatus for reducing on-line fraud using personal digital identification
US7949111Jan 4, 2008May 24, 2011At&T Intellectual Property Ii, L.P.Call routing method
US8018883 *Mar 26, 2007Sep 13, 2011Cisco Technology, Inc.Wireless transmitter identity validation in a wireless network
US8036661 *Dec 24, 2009Oct 11, 2011Research In Motion LimitedMethod and system for handling a faulty registration for a mobile communications device
US8180687 *Feb 1, 2010May 15, 2012Searchlite Advances, LlcMethod for selectively verifying or blocking remote purchase requests
US8243904Dec 4, 2009Aug 14, 2012International Business Machines CorporationMethods to improve security of conference calls by observation of attendees' order and time of joining the call
US8494142Dec 4, 2009Jul 23, 2013International Business Machines CorporationMethods to improve fraud detection on conference calling systems based on observation of participants' call time durations
US8542802Feb 15, 2007Sep 24, 2013Global Tel*Link CorporationSystem and method for three-way call detection
US8630726Feb 12, 2009Jan 14, 2014Value-Added Communications, Inc.System and method for detecting three-way call circumvention attempts
US8630942 *Oct 22, 2008Jan 14, 2014Fraud Control Systems.Com CorporationMethod of billing a purchase made over a computer network
US8635683Dec 4, 2009Jan 21, 2014International Business Machines CorporationMethod to improve fraud detection on conference calling systems by detecting re-use of conference moderator passwords
US8638916 *May 31, 2005Jan 28, 2014Verizon Business Global LlcMethod and apparatus for providing fraud detection using connection frequency and cumulative duration thresholds
US8682745Apr 23, 2012Mar 25, 2014Thomas A. FindleyMethod for selectively verifying or blocking remote purchase requests
US8731934Feb 15, 2008May 20, 2014Dsi-Iti, LlcSystem and method for multi-modal audio mining of telephone conversations
US20050262563 *May 31, 2005Nov 24, 2005Mahone Saralyn MMethod and apparatus for providing fraud detection using connection frequency and cumulative duration thresholds
US20140081869 *Nov 21, 2013Mar 20, 2014Fraud Control Systems.Com CorporationMethod of billing a purchase made over a computer network
WO1997004602A2 *Jul 19, 1996Feb 6, 1997Lockheed CorpMethod for using personal identification numbers with telecommunications calls
WO1998059518A2 *Jun 16, 1998Dec 30, 1998Ericsson Ge Mobile IncProcessing of emergency calls in wireless communications system with fraud protection
Classifications
U.S. Classification455/410, 379/189
International ClassificationH04M15/00, H04W12/06, H04W12/12
Cooperative ClassificationH04M15/47, H04M2215/32, H04W12/06, H04M15/00, H04M2215/0148, H04W12/12
European ClassificationH04M15/47, H04W12/06, H04W12/12, H04M15/00
Legal Events
DateCodeEventDescription
Mar 17, 2008REMIMaintenance fee reminder mailed
Mar 10, 2008FPAYFee payment
Year of fee payment: 12
Mar 10, 2004FPAYFee payment
Year of fee payment: 8
Jan 11, 2001ASAssignment
Owner name: CELLCO PARTNERSHIP, NEW JERSEY
Free format text: ASSIGNMENT TO CORRECT ASSIGNEE S NAME TO CELLCO PARTNERSHIP RECORDED ON MAY 30, 2000 AT REEL 01084,FRAME 0495;ASSIGNOR:AIRTOUCH COMMUNICATIONS, INC.;REEL/FRAME:011231/0118
Effective date: 20000403
Owner name: CELLCO PARTNERSHIP GENERAL COUNSEL 18O WASHINGTON
Free format text: ASSIGNMENT TO CORRECT ASSIGNEE S NAME TO CELLCO PARTNERSHIP RECORDED ON MAY 30, 2000 AT REEL 01084,FRAME 0495;ASSIGNOR:AIRTOUCH COMMUNICATIONS, INC. /AR;REEL/FRAME:011231/0118
May 30, 2000ASAssignment
Owner name: CELLCO PARTNERSHIP, INC., NEW JERSEY
Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNOR:AIRTOUCH COMMUNICATIONS, INC.;REEL/FRAME:010841/0495
Effective date: 20000403
Owner name: CELLCO PARTNERSHIP, INC. ATTENTION: GENERAL COUNSE
Mar 9, 2000FPAYFee payment
Year of fee payment: 4
Jul 22, 1997CCCertificate of correction
Mar 18, 1996ASAssignment
Owner name: AIRTOUCH COMMUNICATIONS, INC., CALIFORNIA
Free format text: MERGER;ASSIGNOR:AIRTOUCH COMMUNICATIONS OF CALIFORNIA;REEL/FRAME:007844/0296
Effective date: 19950717
Mar 27, 1995ASAssignment
Owner name: AIRTOUCH COMMUNICATIONS OF CALIFORNIA, CALIFORNIA
Free format text: CHANGE OF NAME;ASSIGNOR:AIRTOUCH COMMUNICATIONS;REEL/FRAME:007390/0072
Effective date: 19950103